CVE-2019-1999 (retired)

Priority
Description
In binder_alloc_free_page of binder_alloc.c, there is a possible double
free due to improper locking. This could lead to local escalation of
privilege in the kernel with no additional execution privileges needed.
User interaction is not needed for exploitation. Product: Android.
Versions: Android kernel. Android ID: A-120025196.
Ubuntu-Description
It was discovered that a race condition existed in the Binder IPC driver
for the Linux kernel. A local attacker could use this to cause a denial of
service (system crash) or possibly execute arbitrary code.
Package
Source: linux (LP Ubuntu Debian)
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):ignored (was needs-triage ESM criteria)
Ubuntu 14.04 ESM (Trusty Tahr):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.10 (Cosmic Cuttlefish):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 19.04 (Disco Dingo):released (5.0.0-15.16)
Ubuntu 19.10 (Eoan):released (5.0.0-15.16)
Patches:
Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2Fixed by 5cec2d2e5839f9c0fec319c523a911e0a7fd299f
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.10 (Cosmic Cuttlefish):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 19.04 (Disco Dingo):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 19.10 (Eoan):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):DNE
Ubuntu 19.10 (Eoan):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.10 (Cosmic Cuttlefish):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 19.04 (Disco Dingo):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 19.10 (Eoan):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):DNE
Ubuntu 19.10 (Eoan):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):ignored (was needs-triage ESM criteria)
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):DNE
Ubuntu 19.10 (Eoan):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [abandoned])
Ubuntu 16.04 LTS (Xenial Xerus):ignored (abandoned)
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):DNE
Ubuntu 19.10 (Eoan):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.10 (Cosmic Cuttlefish):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 19.04 (Disco Dingo):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 19.10 (Eoan):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):DNE
Ubuntu 19.10 (Eoan):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):ignored (end-of-life)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):DNE
Ubuntu 19.10 (Eoan):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [abandoned])
Ubuntu 16.04 LTS (Xenial Xerus):ignored (end-of-life)
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):DNE
Ubuntu 19.10 (Eoan):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [abandoned])
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):DNE
Ubuntu 19.10 (Eoan):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):DNE
Ubuntu 19.10 (Eoan):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (5.0.0-15.16~18.04.1)
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):DNE
Ubuntu 19.10 (Eoan):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.10 (Cosmic Cuttlefish):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 19.04 (Disco Dingo):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 19.10 (Eoan):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):ignored (was needs-triage ESM criteria)
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):DNE
Ubuntu 19.10 (Eoan):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [end-of-life])
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):DNE
Ubuntu 19.10 (Eoan):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [end-of-life])
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):DNE
Ubuntu 19.10 (Eoan):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [end-of-life])
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):DNE
Ubuntu 19.10 (Eoan):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):DNE
Ubuntu 19.10 (Eoan):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [abandoned])
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):DNE
Ubuntu 19.10 (Eoan):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [abandoned])
Ubuntu 16.04 LTS (Xenial Xerus):ignored (abandoned)
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):DNE
Ubuntu 19.10 (Eoan):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [abandoned])
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):DNE
Ubuntu 19.10 (Eoan):DNE
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):ignored (was needs-triage now end-of-life)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.10 (Cosmic Cuttlefish):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 19.04 (Disco Dingo):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 19.10 (Eoan):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.10 (Cosmic Cuttlefish):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 19.04 (Disco Dingo):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 19.10 (Eoan):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.10 (Cosmic Cuttlefish):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 19.04 (Disco Dingo):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 19.10 (Eoan):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Package
Upstream:released (5.1~rc3)
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 18.10 (Cosmic Cuttlefish):DNE
Ubuntu 19.04 (Disco Dingo):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
Ubuntu 19.10 (Eoan):not-affected (CONFIG_ANDROID_BINDER_IPC is disabled)
More Information

Updated: 2019-06-03 19:15:47 UTC (commit 44f4ed606c2da48046c30d7037221a6a8a7e0e4d)